Linux's Security Capabilities

7.1 Configuration

• All applications using PAM must have a configuration file in /etc/pam.d . Each file is composed of four columns:
  • Module type:
    • auth: user authentication
    • account: user restriction (ex: hour restriction, ... )
    • session: tasks to perform at login and logout
      ex: mounting directories, ...
    • password: update of the user authentication token
  • success control:
    • required: a leat one of the required modules
    • requisite: all the requisite modules
    • sufficient: only one sufficient module
    • optional: a least one of the required modules is necessary if no other has succeeded
  • path to the module: usually /lib/security .
  • optional arguments

• the /etc/pam.d/other file provides default configuration for all modules not specified in the configuration file of the application.

Linux's Security Capabilities

® © Hervé Schauer Consultants 2000 - 4 bis, rue de la gare - 92300 Levallois-Perret
Phone : +33 141 409 700 - Fax : +33 141 409 709 - Email : <secretariat@hsc.fr>